Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.fondieki.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 18, 2025
Valid Until
January 17, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
54:98:6C:DB:69:11:D6:5D:8B:4F:13:AE:D7:3C:D9:30:5D:56:A7:13:2B:D3:52:5B:CA:E4:8F:B3:AB:34:47:F0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
krassgeil.de
www.1123eleven.com
nieuws.11yearsafter11.nl
app.1ludo.com
2060.yucolab.com
27graphic.com
88888888.se
absengineeringworks.com
www.aicleaner.app
almanabir.app
www.alvinshau.com
pay.apphive.io
arab-familytree.com
library.armenian.ca
askzvo.com
ranked.atique.app
atominvention.com
ayundays.com
bemovd.app
www.bholebaba.com
bo-demo.blueparking.app
threadmaker.bluerobot.com
botgascar.com
www.candlestick.ai
capetip.com
catalystlabs.io
www.charlottetennis.us
angloindian-manage.classet.in
vasista-manage.classet.in
clearance19.app
dashboard.climate.ai
learning-platform-sandbox-ckt.cloudpssolutions.com
collectivepool.org
constructionmlsr.ca
erp-test.cpocloud.net
dharmadreams.app
www.dhgfgff5.com
app.digitalpoolleague.com
www.dinox.com.co
doiliveinademocracy.biz
dornwellcurecenter.in
www.dornwellcurecenter.in
www.ecoverdevo.nl
ektanutribites.com
admin.emaiswallet.com
entrepreneur-thrive.com
equlaq.com
evan-and-sarah.com
everydaysamething.net
ffetch.ai
www.fiftyone.app
www.fondieki.com
www.frend.app
map.gamebadges.eu
dev-www.getbap.com
goldensurfandtour.info
gozetech.online
comics.hogsrule.com
qa.idmx.io
amid.it.com
jobque.ai
cr.dev.kengin.app
kevin-marques.com
kiva.app
lockviewlive.com
lol-abacus.com
www.loud-technology.com
lsattachiris.com
tmw.luca-ai.app
www.menchascraftbeer.com.co
mmnkvt.com
modernfakir.us
negocios.mybiznez.app
prediagnostico.mymoons.co
eat2winportal.mysportsd.com
www.natrajmasala.com
noders.app
go.o7digital.com
www.octakode.xyz
link.okocam.app
onlinegaihan.com
wedding.radotzki.com
at.rho-staging.co
rorepaircare.in
www.saidthat.app
ithelpdesk.smbtecampus.org
www.sneakytools.io
soccerwatch.de
styleit.app
www.techdigitalcard.com
thefreebee.app
www.tomaattitehdas.fi
tommythomas.us
www.truepay.com.br
platform.use-action.com
www.vismal.com.br
wadihhannouch.com
whatsopen.app
xports.app
yortrn.app
Other domains in certificate